Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: o/HQkbOhxXHoQeuUenhXSrpTKNEmoX2WEomE+8Z8hF4=
Subject key identifier: 12:67:2B:B3:BC:D7:D2:C3:C2:C2:7B:D1:6F:F2:ED:1D:1F:A6:D5:DF
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019847AD84A0E52A51C6A03750A80FDE22B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 17:00:10 +0000
Manifest this update: Sat 26 Jul 2025 17:00:10 +0000
Manifest next update: Sun 27 Jul 2025 17:00:10 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: jf1PMltPJJaKvvkpgd/PXG9lVVqQEd8J+gM+A1FX3GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:84:a0:e5:2a:51:c6:a0:37:50:a8:0f:de:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jul 26 17:00:10 2025 GMT
Not After : Jul 27 17:00:10 2025 GMT
Subject: CN=12672bb3bcd7d2c3c2c27bd16ff2ed1d1fa6d5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:0b:ac:87:f3:78:15:08:d7:14:3a:17:5c:
4f:5c:07:df:d4:e5:d1:00:1d:99:44:33:2b:fe:80:
c3:6c:74:f5:09:5c:d2:24:a4:38:81:00:1f:73:63:
e7:77:81:38:6a:4a:9b:a7:7f:ee:42:65:46:cd:d1:
d9:7a:30:d6:a1:35:fc:5d:e3:89:2c:a5:59:a4:a2:
af:89:51:8d:f4:4b:5c:c5:4b:de:46:b0:e0:ec:ff:
7c:22:21:f1:2e:13:e5:ba:7c:e8:06:0e:6c:f9:e5:
40:e0:f4:60:a0:17:a8:df:88:5d:3b:6d:5e:3f:af:
ab:6e:8b:78:56:8e:06:17:8b:21:fd:2b:7d:d9:63:
64:d2:19:1d:b5:61:ff:18:95:5c:c5:ca:1f:53:b2:
69:7f:a7:2a:25:a1:7d:5b:34:5b:02:46:dd:e3:af:
12:5d:61:d4:ba:07:09:4a:82:97:93:8a:c0:51:b9:
b3:a9:b6:00:54:9c:9e:6d:9e:6d:88:b4:ad:bb:c4:
23:53:2e:92:4a:b3:6c:da:dd:7e:fc:93:35:fd:96:
4d:aa:14:8c:16:6e:35:ce:0b:df:5b:31:3f:51:a9:
66:83:04:40:a0:a8:90:27:42:4e:46:d3:6c:25:ad:
a5:c4:c5:5a:31:e9:a6:db:ad:fb:24:0d:e0:c6:15:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:2B:B3:BC:D7:D2:C3:C2:C2:7B:D1:6F:F2:ED:1D:1F:A6:D5:DF
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:05:29:4d:87:b1:8d:ed:cd:c9:20:a0:3e:0e:38:e9:82:0a:
06:7a:00:c6:69:0e:31:9f:9a:87:ae:27:b7:12:78:d8:ec:ae:
4f:60:cf:43:5d:70:ba:b0:7e:e4:a1:ef:c4:59:3e:56:69:a6:
a9:57:0f:6d:dc:8e:c7:32:65:04:48:e8:5c:c4:19:ec:67:52:
15:e3:7e:b3:a9:db:fd:52:01:c6:d8:26:46:35:45:15:94:41:
a2:de:70:a0:b6:00:4f:68:f6:ec:1c:6c:32:02:05:b5:be:e5:
c9:de:f4:01:98:3d:c3:20:f4:56:c1:63:6f:a0:83:29:9a:b5:
a6:47:ff:7e:c0:99:71:e2:09:41:17:49:04:66:21:6d:96:bb:
91:d3:a3:7f:da:74:4f:52:49:7f:7e:e5:89:08:44:d7:4a:ee:
64:1c:40:a2:64:44:1d:60:e3:4e:f3:86:e9:23:da:79:9b:84:
d5:ec:f4:f9:55:95:c3:a1:ed:0c:1a:e2:9a:08:6c:e3:5a:25:
ae:e2:87:07:35:2d:6c:ea:99:4b:45:f0:f6:bd:e5:e2:76:15:
b0:31:a5:e9:52:d5:98:ef:49:f2:a0:94:f7:b5:cb:9e:83:7e:
30:9c:63:03:50:dc:f8:23:28:99:15:04:65:49:8c:68:32:72:
7a:72:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:10 2025 by rpki-client